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DETAILED ACTION 

This office action is in response to application filed on April 24, 2008 in which claims 1- 
6 are presented for examination. 

Status of Claims 

Claims 1-6 are pending; of which claim 1 is in independent form. Claim 6 is canceled. 
Claims 1-5 are rejected under 35 U.S.C. 103(a). 

Specification 

1 . The title of the invention is not descriptive. A new title is required that is clearly 
indicative of the invention to which the claims are directed. 

The following title is suggested: Device for executing an application program based on 
the confidentiality information associated with program classes. 

Claim Rejections - 35 USC §103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claims 1-4 are rejected under 35 U.S.C. 103(a) as being unpatentable over Torii et al. 
(US 2002/0184495 Al) in view of Kershenbaum et al. (US 2002/0184486 Al). 
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With respect to claim 1, Torii teaches the limitation of "an encryption judgment unit 
operable to judge whether or not encryption of data manipulated by a given one of the methods is 
necessary, with reference to the confidentiality information that corresponds to the class to which 
the method belongs" (page 1, paragraph 0012) as necessity determination means for determining 
whether or not received data needs to be encrypted. 

In addition, Torii teaches the limitations of "an object recording unit operable to, when 
the method is to be executed, record, in a memory, an object that includes the data that the 
method manipulates" and "when the encryption judgment unit judges that encryption is 
necessary, the object recording unit records the object with encrypted data included therein" 
(page 1, paragraph 0013) as encryption means for encrypting data which is determined as having 
to be encrypted, before being stored in a storage apparatus. 

It is noted, however, that Torii does not explicitly teach the limitation of "the application 
program including one or more classes that each have one or more methods, and confidentiality 
information that corresponds respectively to the classes and that expresses whether or not it is 
necessary for the corresponding class to be confidential." 

However, Kershenbaum teaches (page5, paragraph 0059) Java 2 allocates Permissions to 
classes, thus can allocate confidentiality information to classes by using structure of Object 
Oriented program code. 

It would have been obvious to one of the ordinary skill in the art at the time of the 
invention to incorporate teachings of Kershenbaum into the system of Torii to further secure the 
system by not only controlling the authorization usage of the collection of code but also 
encrypting the necessary portions of it. 
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With respect to claim 2, Torii teaches the limitation of "the confidentiality information 
further includes information showing a level of confidentiality" (page 4, paragraph 0072) as the 
importance of the data is determined by the NIC based on an item provided to the data, namely 
an indicator regarding importance. 

In addition, Torii teaches the limitation of "the execution device further comprises an 
encryption method determination unit operable to, with reference to the confidentiality 
information, determine an encryption method, and when the encryption determination unit 
judges that encryption is necessary, the object recording unit records the object with the data 
encrypted according to the determined encryption method" (page 4, paragraph 0080) as based on 
the determination result regarding importance of data the NIC determines whether or not it is 
necessary to encrypt the data. Then (page 4, paragraph 0083) the encrypted data is stored in the 
HDD or RAM. 

With respect to claim 3, examiner takes the official notice that replacing encrypted data 
in the object or a database with the encrypted data is well known in the art as the concept of 
inheritance. It would have been obvious to one of the ordinary skill in the art at the time of the 
invention to incorporate this knowledge into the system of Torii and Kershenbaum to improve 
the security of the system. 

With respect to claim 4, Torii teaches the limitation of "the object recorded in the 
memory includes information showing whether or not the data in the object is encrypted, and 
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when the information shows that data in the object is encrypted, the data is recorded encrypted" 
(page 4, paragraphs 0069 and 0071) as the NIC determines whether the received data already is 
in an encrypted form. The determination of whether or not the data is in encrypted form is made 
possible by determining whether or not the data is marked with an encryption flag. 

4. Claim 5 is rejected under 35 U.S.C. 103(a) as being unpatentable over Torii et al. (US 
2002/0184495 Al) in view of Kershenbaum et al. (US 2002/0184486 Al) as applied to claim 1, 
and further in view of Caronni et al. (US 20030133574 Al). 

With respect to claim 5, it is noted that neither Torii nor Kershenbaum teach the 
limitation of "a data judgment unit operable to judge whether or not the data is data necessary for 
specifying an address location of other data, wherein when the data judgment unit judges that the 
data is data necessary for specifying an address location of other data, encryption is suppressed." 

On the other hand, Caronni teaches the above motioned limitation (page 2, paragraph 
0029) as Memory Management Unit (MMU) associates key tags with particular memory regions 
so that every time MMU retrieves a map between a virtual memory address and physical 
memory address, a corresponding key tag is accessed. The key tag may indicate that the 
instruction(s) or data at the physical memory address are unencrypted and should be processed in 
the clear (e.g., without encryption or decryption). 

It would have been obvious to one of the ordinary skill in the art at the time of the 
invention to incorporate teachings of Caronni into the system of Torii and Kershenbaum to 
reduce the overhead on the processing unit by not requiring decrypting the address information 
for every data transfer. 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to KONSTANTIN SHEPELEV whose telephone number is 
(571)270-5213. The examiner can normally be reached on Mon - Thu 8:30 - 18:00, Fri 8:30 - 
17:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on (571)272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Konstantin Shepelev/ 9/30/2008 
Examiner, Art Unit 2131 
/Syed Zia/ 

Primary Examiner, Art Unit 2131 



